Bhiu Privacy Policy

What Bhiu Does

Bhiu is an independent app for your own OpenWrt router. It shows you what is happening on your own network — live traffic, connected devices, Wi-Fi status — and lets you act on it: pause a device's internet access, turn an SSID on or off, restart a service, wake a sleeping machine, or reboot the router.

Bhiu talks only to the router address you enter, and to nothing else. There is no Bhiu account, no Igney server, and no sign-up. Bhiu does not use an analytics service, an advertising service, a crash-reporting service, or any third-party tracking SDK.

Data Collected by Igney

Igney receives no personal data through Bhiu. The app sends nothing to Igney, and Igney operates no server that Bhiu contacts.

There is one thing Igney does receive, and it has nothing to do with the app running on your phone: if you write to us, we receive your email. That is described under Support correspondence below.

Data Stored on Your Device

Bhiu keeps three things on your iPhone, and it keeps them separately for each router you save:

• Your router's connection details — the name, address, port, whether you chose HTTP or HTTPS, and the username you sign in with. These are stored in a file inside the app's own storage.
• Your router password — stored in the iOS Keychain, and nowhere else, under an entry belonging to that one router. It is never written to that file, never logged, and never sent anywhere except to the router you entered, in order to sign in to it. It is marked as available only on this device, so it is not synced to iCloud or to your other devices.
• A pinned certificate fingerprint, if you connect over HTTPS to a router with a self-signed certificate. This is a hash of the router's certificate — public information, not a secret.

The built-in demo saves a router record too, so the app knows to open in demo mode. It has no password and no real address, and nothing is ever sent for it.

Everything else Bhiu shows you — the device list, hostnames, MAC and IP addresses, signal strengths, Wi-Fi networks, the routing table, traffic figures — is read from your router while the app is open and held in memory only. None of it is written to disk, and it is gone when you close the app.

Connecting to Your Router

Bhiu connects directly to the address you type in. Because that address is normally on your own network, iOS asks for Local Network permission the first time. If you decline it, Bhiu cannot reach your router at all — that is the only thing the permission is used for, and the built-in demo still works without it.

Bhiu does not scan or browse your network. It does not use Bonjour or any other discovery mechanism, and it contacts no address other than the one you entered. If you have saved more than one router, Bhiu talks to the one you have selected and to no other — switching routers closes the old connection before opening the new one.

The connection scheme defaults to HTTP, so on a local network your router password crosses the LAN in plaintext unless you choose HTTPS. If you do choose HTTPS and your router uses a self-signed certificate, Bhiu shows you the certificate's fingerprint and asks you to trust it once; after that it accepts only that exact certificate and tells you if it ever changes. Bhiu relies on the protections the iOS platform provides.

Changes Bhiu Makes to Your Router

When you use Bhiu to act on your network, it changes the configuration of your own router. Pausing a device adds a firewall rule named Bhiu pause <MAC address>; toggling a Wi-Fi network changes that network's setting. These changes live on your router, are visible in LuCI like any other rule, and can be removed from Bhiu's Settings screen or by hand. They are not sent anywhere else.

Diagnostics

Bhiu keeps a short list of the most recent errors your router returned, so you can see what failed. It records the name of the call and the error text only — never the arguments to a call, which can contain passwords or Wi-Fi keys. The list is held in memory, is limited to the fifty most recent entries, and is not written to disk or transmitted anywhere.

Settings has a Copy button for this list. Using it puts the text on your iPhone's clipboard so you can paste it somewhere — into an email to us, for example. That is your action and your choice of recipient; Bhiu does not send it anywhere on its own.

Data Sharing

Igney does not share personal data collected through Bhiu with anyone, because the app gives Igney none to share. There are no analytics providers, no advertising networks, no crash-reporting services, and no data brokers involved.

Where you choose to share something yourself — by copying the diagnostics list and pasting it into a message — the recipient is whoever you send it to. Igney is not a recipient unless you write to us, and no Igney infrastructure is involved in getting it there.

Data Sale

Igney does not sell personal data. Bhiu provides none to sell.

Third-Party Services

Bhiu uses no third-party frameworks of any kind. It is built entirely on Apple's own system frameworks: Foundation, SwiftUI, UIKit, Observation, Swift Charts, Security (for the Keychain), CryptoKit (for the certificate fingerprint), os, and WidgetKit.

Bhiu is an independent app and is not affiliated with or endorsed by the OpenWrt project.

Support Correspondence

If you email us — at privacy@igney.com or any other Igney address — we receive your email address, whatever you write, and anything you attach. People often attach a screenshot or a copy of the diagnostics list, so that mail can contain details about your own network.

We use it for one thing: to answer you and to deal with any follow-up. The legal basis is our legitimate interest in providing support for our products, under Article 6(1)(f) of the GDPR — or, where your message concerns a purchase from us, the performance of that contract under Article 6(1)(b).

Support correspondence is kept while it remains useful for handling your enquiry and any related follow-up, and is deleted when it is no longer needed for that purpose.

You can ask us to delete your correspondence at any time by writing to privacy@igney.com.

Data Retention and Deletion

On your device. Settings → Forget this router deletes the saved router record, its Keychain password, and its pinned certificate fingerprint. It removes only the router you are looking at; if you have saved others, they stay, and Bhiu switches to one of them. Deleting the app removes its stored files. Keychain items are not always removed by deleting an app, so if you want a stored password gone with certainty, use Forget this router on each saved router before you delete Bhiu.

On your router. Anything Bhiu created there stays until it is removed. Settings → Remove Rules deletes every firewall rule Bhiu created and unpauses those devices; you can also delete them by hand in LuCI.

With Igney. The only thing Igney holds is support correspondence, covered above.

Children's Privacy

Bhiu is a network administration tool and is not directed at children. It collects no personal data from anyone, of any age, through the app.

Changes to This Policy

If this policy changes materially, the updated version is published at the address above with a new effective date. The app version each revision was audited against is recorded in the header, so you can tell whether this page describes the build you have.

Your Rights Under the GDPR

Data controller

Igney ApS
CVR 46552334
Denmark
privacy@igney.com
igney.com

Legal basis for processing

Igney receives no personal data through Bhiu, so there is no app processing to have a legal basis for. The data Bhiu holds is on your own device and under your control, and the data it reads from your router belongs to your own network.

There is one kind of processing Igney does carry out, and it is described under Support correspondence: handling email you send us, on the basis of our legitimate interest in supporting our products under Article 6(1)(f), or the performance of a contract under Article 6(1)(b) where your message concerns a purchase.

Retention

Support correspondence is kept while it remains useful for handling your enquiry and any related follow-up, and is deleted when it is no longer needed for that purpose.

Igney retains nothing else, because Bhiu gives Igney nothing else to retain. Data on your device is kept until you delete it — see Data Retention and Deletion.

International transfers

Bhiu itself involves no transfer of personal data to Igney, in the EEA or outside it — the app sends Igney nothing.

The only personal data Igney holds is your support correspondence. The privacy@igney.com mailbox is hosted by Simply.com A/S in Denmark, inside the EEA, under a signed data processing agreement meeting Article 28 of the GDPR. Writing to Igney therefore involves no transfer of personal data to a third country, and there is no adequacy decision or set of standard contractual clauses for Igney to rely on, because none is needed. If the mailbox ever moves to a provider that processes mail outside the EEA, this section will name the safeguard that transfer relies on.

Where you use Apple's services — the App Store, iOS itself — your relationship is with Apple and is governed by Apple's privacy policy, not by any transfer Igney makes.

Automated decision-making

Igney carries out no automated decision-making or profiling in relation to you, and none that produces legal or similarly significant effects.

Bhiu does summarise your network's state on your device — turning readings from your router into a sentence such as "Everything is fine." That is a description computed on your iPhone and shown only to you. Igney never sees it, no decision about you follows from it, and it is not Article 22 processing.

Your rights

These rights apply to personal data Igney processes about you. Since the only such data is your support correspondence, that is what each one applies to:

• Access — you can ask for a copy of the correspondence we hold from you. Igney holds no other personal data about you to provide, and the data on your device is already yours.
• Rectification — you can ask us to correct anything inaccurate in it.
• Erasure — you can ask us to delete it. Data on your device is deleted by you, through Forget this router or by deleting the app.
• Restriction — you can ask us to limit how we use it.
• Portability — you can ask for your correspondence in a portable form. Bhiu has no export feature and holds nothing on Igney's behalf, so there is nothing for the app to deliver.
• Objection — you can object to our handling of your support correspondence under the legitimate-interest basis stated above. If you object, we will stop unless we have compelling legitimate grounds that override your interests.
• Withdrawal of consent — where we ever rely on your consent, you can withdraw it at any time, without affecting anything done before you did.

Write to privacy@igney.com to exercise any of these. We will answer.

Complaints

You have the right to complain to a supervisory authority. In Denmark this is Datatilsynet, the Danish Data Protection Agency:

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
Denmark
datatilsynet.dk

Contact

Questions about this privacy policy:

Email: privacy@igney.com
Website: igney.com